Ruijie RG-S2900G-E Series, Руководство по настройке

Страница: 480 / 943

Configuration Guide RADIUS Configuration
RADIUS Configuration
Overview
The Remote Authentication Dial-In User Service (Radius) is a distributed client/server system
that works with the AAA to perform authentication for the users who are attempting to make
connection and prevent unauthorized access. In the implementation of our product, the
RADIUS client runs on the router or the network access server (NAS) to send the
authentication requests to the central RADIUS server. The central center includes all
information of user authentication and network services.
Since the RADIUS is a completely-open protocol, it has become a component and been
installed in such systems as UNIX and WINDOWS 2000, so it is the security server most widely
used for the time being.
The running process of the RADIUS is as follows:

Prompt the user to enter username and password.

The username and the encrypted password are sent to the RADIUS server via the
network.

The RADIUS returns one of the following responses:

The user authentication passes.

The user authentication fails and it prompts to reenter the username and password.

The RADIUS server sends the challenge request to gather more authentication
information from the user.

The user authorization information is included in the ACCEPT response.
Here is a typical RADIUS topology: